---
title: "GET /detector/{detectorId}/malware-scan-settings"
method: GET
path: "/detector/{detectorId}/malware-scan-settings"
---

# GET /detector/{detectorId}/malware-scan-settings

`GET /detector/{detectorId}/malware-scan-settings`

Returns the details of the malware scan settings.

There might be regional differences because some data sources might not be available in all the Amazon Web Services Regions where GuardDuty is presently supported. For more information, see [Regions and endpoints](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_regions.html).

## Path parameters

- `detectorId` string, required

## Response `200`

Success

- GetMalwareScanSettingsResponse
  - `ScanResourceCriteria` object — Represents the criteria to be used in the filter for scanning resources.
    - `Include` object — Represents condition that when matched will allow a malware scan for a certain resource.
    - `Exclude` object — Represents condition that when matched will prevent a malware scan for a certain resource.
  - `EbsSnapshotPreservation` 'NO_RETENTION' | 'RETENTION_WITH_FINDING' — An enum value representing possible snapshot preservation settings.

## Other responses

- `480` — BadRequestException
- `481` — InternalServerErrorException

---

[API](https://skmtc.net/aws/apis/guardduty.md) · [All operations](https://skmtc.net/aws/apis/guardduty/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/guardduty/versions/d35ef49b25a3/schema)